The following links point to the US versions of hotfixes. At Microsoft's ftp site, you need to select the appropriate country directory below ftp.microsoft.com/bussys/winnt/winnt-public/fixes to ensure that you download the correct localized version.
- Rasman-fix
ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/nt40/hotfixes-postsp6/security/rasman-fix
- Winlogon-fix
ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/nt40/hotfixes-postsp6a/winlogon-fix
- C2-fix
http://download.microsoft.com/download/winntsp/patch/sp6a_c2/nt4/en-us/q244599i.exe
- Syskey and LSA Vulnerability security patch
http://www.microsoft.com/downloads/release.asp?releaseid=16798 for Intel, http://www.microsoft.com/downloads/release.asp?releaseid=16799 for Alpha